Overview

overview

7

Static

static

1

Adobe PS CS6.rar

windows10-2004-x64

3

Adobe PS C...ia.txt

windows10-2004-x64

1

Adobe PS C...up.exe

windows10-2004-x64

7

Resubmissions

24-03-2023 16:32

230324-t167gshf8v 7

24-03-2023 15:54

230324-tcj22sfd66 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Adobe PS CS6.rar

  • Size

    73.7MB

  • Sample

    230324-tcj22sfd66

  • MD5

    29ad271054dc7a7fcfb691ac9515ab3b

  • SHA1

    96e9489824c0944188d48384efb7d0d4ac74eaeb

  • SHA256

    6f2826909d7cc11f2c297cae935a606c36bef1758d191d06deb82a6cd7600d0e

  • SHA512

    259598be80d8634dd8fafcda7c81c3ae605ea510dfd8259df63db097bab606adfd7dd3c72e8479ff7731fdc1af78312cfe31d82e41db3965ffe6740a04f068ef

  • SSDEEP

    1572864:JKT3GWkokgm1Pia0dgTqHXwTvQ6GH0FBEJNJ5TOLOx7fSTtjIvmEx4:JKTWWMia0mDAUrEzvOG6T2e+4

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      Adobe PS CS6.rar

    • Size

      73.7MB

    • MD5

      29ad271054dc7a7fcfb691ac9515ab3b

    • SHA1

      96e9489824c0944188d48384efb7d0d4ac74eaeb

    • SHA256

      6f2826909d7cc11f2c297cae935a606c36bef1758d191d06deb82a6cd7600d0e

    • SHA512

      259598be80d8634dd8fafcda7c81c3ae605ea510dfd8259df63db097bab606adfd7dd3c72e8479ff7731fdc1af78312cfe31d82e41db3965ffe6740a04f068ef

    • SSDEEP

      1572864:JKT3GWkokgm1Pia0dgTqHXwTvQ6GH0FBEJNJ5TOLOx7fSTtjIvmEx4:JKTWWMia0mDAUrEzvOG6T2e+4

    Score
    3/10
    behavioral1

    • Target

      Adobe PS CS6/Licencia.txt

    • Size

      52B

    • MD5

      be5053d374c7656c793a75762df76601

    • SHA1

      356f0ab36d1fc73c22207ff2568e0133cc1efccf

    • SHA256

      74fcd8a94340eed99004b0bab1c8de8783e3ec0e74b587ec311f1effde4ed02a

    • SHA512

      a114dd2208b57718aa7d420127248463e912dc90b03a0067ce94f394c51894a7d55d977bceb4e1e659145cf588a8ffe1cd9c36e468994b277dee0a27f303410e

    Score
    1/10
    behavioral2

    • Target

      Adobe PS CS6/setup.exe

    • Size

      73.7MB

    • MD5

      02dde17be4c7a3dce827d28df8117e3c

    • SHA1

      2098d73511a1daac926645cad8a7b5fec6cf7f47

    • SHA256

      e071f7aff74e187f07a9f1ee88eeac9be728447aad359a0cda32fe7b62228bec

    • SHA512

      31c9f5582872e4634751ef1ab52b0f8e57ec0408c78aaa1aeb7d6883ae0991416da3c5eaea27ca64b5c6eb5fde930f85acf4fa9c68485b546e528081d22a6156

    • SSDEEP

      1572864:wKT3GWkokgm1Pia0dgTqHXwTvQ6GH0FBEJNJ5TOLOx7fSTtjIvmExf:wKTWWMia0mDAUrEzvOG6T2e+f

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral3

MITRE ATT&CK Enterprise v6

Tasks